Sign inSign up
cloudflared

dhi.io/cloudflared

cloudflared 2026.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2026-debian-fips-dev, 2026-debian13-fips-dev, 2026-fips-dev, 2026.10-debian-fips-dev, 2026.10-debian13-fips-dev, 2026.10-fips-dev, 2026.10.0-debian-fips-dev, 2026.10.0-debian13-fips-dev, 2026.10.0-fips-dev

Index digest:

sha256:290353bc0b104dcff658f52a331ae95428e57b62832b8c0d9891b60ff14ef6c5

Manifest digest:

sha256:0700d859a8f13859217b1144dc790e6d2ae3b8805ce09f30f4e463249de7d085

Size

41.99 MB

Last pushed

2 days ago

Vulnerabilities

0
0
0
1
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/cloudflared:2026-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/cloudflared:2026-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/cloudflared@sha256:8839429ce50f3b9b89d934c9229a5c9ec754acb9db5d4962d7decc9d5d9fbfdb
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/cloudflared@sha256:c1eaf729ac438578f15a28ccae3d76bf4174ebc0b03ffbf884db53afbaa42853
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/cloudflared@sha256:c3fc6617a4d199c7bc224f3414eabf778a33ef5febbae3bfd6723558369b7a68
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/cloudflared@sha256:45ce262105e34f369d9617c228e66e684f35436176c9a0ca044e4789e8ee22e9
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/cloudflared@sha256:aca4f3ecc2a7890651da17cda48a424961057c6e22614e79668fde4fa0d8449a
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/cloudflared@sha256:9aa96d380073e444f1c195119403a3c67ab0f5cc4991c7625c107e8a70c80b38
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/cloudflared@sha256:fc21192f0ecab5f283fc7762bf9783cb3a3ae0309260bac854e37b3f4459c05b
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/cloudflared@sha256:42f8a987117bbf9c8461d51c35ddd40365b17c50d5b5b049a21326e9c735abe5
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/cloudflared@sha256:8fab6636119d9d0ab6cac9ec6f5bd7c0dbf7ba1786baee1f85886899f1ec2ecf
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/cloudflared@sha256:91021a28b0be53cb3b88a35f61073f73783dba7284c079f92aaf27b0b3b3ae17
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/cloudflared@sha256:843df90f88aaccf5bbd2d518b3cdcc02ff982e56337ed4aba432919c6a5bc025
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/cloudflared@sha256:997726b30e4967c87732185551c829ba0a4140ff1742a3eefe7d47ee30c4b932
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/cloudflared@sha256:edcacb11a1161e9d982e5a138e1906c01a541f46fca0f6cbb5413416a2afb499
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/cloudflared@sha256:586f3f6fb44b206fa59d930e7258a845a7c1cf9f6ca0f77735d61e5ff5509f35
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/cloudflared@sha256:f16d054eb9398a804d351722871e66c36f3eabc74b239af243c2a0a4aaaadfdb
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/cloudflared@sha256:d50e30f2d8fc27dcbf53f865e207d366fe0141f1a5c0027cc11235fa20553983
SPDX SBOMhttps://spdx.dev/Documentdhi.io/cloudflared@sha256:801f0c2e2f9da3327b3d62ffe3d11c204b6ee7f1ff275cedaa71dfa3a8997771